Steven Barth
eecce5abad
arptables: Bump to 0.0.4
...
SVN-Revision: 37020
2013-06-24 05:48:12 +00:00
Steven Barth
69cd09ebbf
6relayd: don't accidentally remove regular prefix routes
...
SVN-Revision: 37018
2013-06-23 16:26:09 +00:00
Steven Barth
f47c4c80d4
6relayd: fix lease-update behaviour for clients without reconfigure
...
SVN-Revision: 37011
2013-06-22 08:31:28 +00:00
Steven Barth
d0d5f109d8
6relayd: Keep PD-downstream across RENEW/REBIND
...
SVN-Revision: 37009
2013-06-22 08:19:25 +00:00
John Crispin
4ebf19b48f
packages: clean up the package folder
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 37007
2013-06-21 16:54:37 +00:00
John Crispin
4999ae4236
hostapd: remove old button hotplug script
...
Signed-off-by: John Crispin <blogic@openwrt.org>
SVN-Revision: 36991
2013-06-21 16:53:07 +00:00
Steven Barth
5108318edb
6relayd: Fix DHCPv6-PD assignment logic
...
SVN-Revision: 36980
2013-06-21 06:15:09 +00:00
Steven Barth
de2a7547b7
6relayd: correctly set downstream routes for DHCPv6-PD
...
SVN-Revision: 36969
2013-06-19 13:08:33 +00:00
Felix Fietkau
b4babf9f81
netifd: update to latest version, fixes a NULL pointer deref bug
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36965
2013-06-18 16:24:48 +00:00
Jo-Philipp Wich
65f82e2311
firewall: update to git head
...
- fixes misprocessing of unknown symbolic protocol names
SVN-Revision: 36963
2013-06-18 14:30:51 +00:00
Jo-Philipp Wich
37ae268729
firewall: update to git head
...
- fixes calculation of IPv4 netmasks derived from 0.0.0.0/0 CIDRs
SVN-Revision: 36960
2013-06-18 14:14:35 +00:00
Steven Barth
5219d38da2
odhcp6c: Add option to override interface identifier in RA-client
...
SVN-Revision: 36959
2013-06-18 12:51:14 +00:00
Steven Barth
9f1899242c
netifd: IPv6: Fix sorting order in last commit.
...
SVN-Revision: 36952
2013-06-17 21:29:14 +00:00
Steven Barth
213269a8f7
netifd: Satisfy IPv6 assignments ordered by prefix length
...
SVN-Revision: 36950
2013-06-17 21:16:22 +00:00
Jo-Philipp Wich
541fbfbb9e
hostapd: correctly handle macfile uci option
...
Make hostapd.sh correctly handle the macfile uci option.
Such option specifies the macfile name to pass into the
hostapd configuration file. Moreover, if a maclist option
has been specified, copy the macfile before appending new
entries.
Signed-off-by: Antonio Quartulli <antonio@open-mesh.com>
SVN-Revision: 36944
2013-06-17 11:59:29 +00:00
Jo-Philipp Wich
dfea3bae11
dnsmasq: use host-record instead of address
...
Using "--address" for individual host A records is broken, use "--host-record" instead.
The following patch changes dnsmasq.init to build individual host records using "--host-record" instead of "--address".
Signed-off-by: Adam Gensler <openwrt at gnslr.us>
[jow: shorter description, simplified shell script code]
SVN-Revision: 36943
2013-06-17 11:55:30 +00:00
Jo-Philipp Wich
36d3fafd77
firewall: update to git head
...
- properly process intermediate "!" options in argument list (fixes negated ipsets)
SVN-Revision: 36935
2013-06-13 18:54:49 +00:00
Jo-Philipp Wich
0db38adf1c
firewall: update to git head
...
- fixes handling of reject target for rule sections with specific destination zone
SVN-Revision: 36933
2013-06-13 12:49:00 +00:00
Jo-Philipp Wich
1150e299bb
uhttpd: expose missing options to uci
...
SVN-Revision: 36932
2013-06-13 11:55:12 +00:00
Steven Barth
302cf427cb
odhcp6c: add sanity checks for NDP and MTU parameters from RAs
...
SVN-Revision: 36930
2013-06-13 06:38:48 +00:00
Steven Barth
4f0a0defa6
6relayd: make route preference and prefix on-link flag configurable
...
SVN-Revision: 36922
2013-06-11 20:52:27 +00:00
Steven Barth
f6dd266c97
iproute2: add drop-failed rule action (patch by Jonas Gorski)
...
SVN-Revision: 36910
2013-06-11 09:27:46 +00:00
Felix Fietkau
9fb5bf176e
netifd: update to latest version, uses the new uci/blob code from libuci
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36909
2013-06-10 12:42:30 +00:00
Steven Barth
5caa45d0b3
ppp: correctly handle address when reloading
...
SVN-Revision: 36904
2013-06-10 10:42:34 +00:00
Steven Barth
491deaed2c
netifd: improve reloading behaviour
...
SVN-Revision: 36903
2013-06-10 10:42:15 +00:00
Jo-Philipp Wich
bc73ca5619
iwinfo: add phyname attribute, this is useful to group networks by radio phy
...
SVN-Revision: 36889
2013-06-09 14:39:14 +00:00
Jo-Philipp Wich
cb24c37858
libiwinfo: ignore log messages from wpa_supplicant while scanning
...
wpa_supplicant may send log and event messages intermixed with the
expected scan results. This makes "iwinfo wlan0 scan" and LuCI
"site survey" display nothing when many AP's are around.
Eliminate the CTRL-EVENT-BSS-ADDED events, interspersed log messages,
lines with unexpected format. Increase timeout to handle the max
number of channels (2.4, 3.6, 4.9, 5 GHz). Insure receive buffer is
null-terminated.
Signed-off-by: Jean-Pierre Tosoni <jp.tosoni@acksys.fr>
SVN-Revision: 36888
2013-06-09 14:39:09 +00:00
Steven Barth
f995c90329
netifd: Improve IPv6 source-routing policies
...
SVN-Revision: 36884
2013-06-08 13:26:33 +00:00
Jonas Gorski
b9de8ca7f5
netifd: bring wifi down before shutting down
...
works around wifiX references not being freed on network restart.
Signed-off-by: Jonas Gorski <jogo@openwrt.org>
SVN-Revision: 36883
2013-06-08 11:44:12 +00:00
Jo-Philipp Wich
e7b15446a8
firewall: udpate to git head ( #13652 , #13654 , #13658 )
...
- optimizes chain usage for ingress rules
- adds limit match support for redirect rules
- fixes automatic redirect dest detection on little endian systems
- leaves base chains in place on reload to allow user rules to target e.g. "reject"
SVN-Revision: 36871
2013-06-06 14:12:02 +00:00
Jo-Philipp Wich
5cf06bd17b
firewall: copy libext*.a from staging dir and drop kernel.mk includes, solves problem with colliding CONFIG_IPV6 symbols
...
SVN-Revision: 36868
2013-06-06 14:02:29 +00:00
Jo-Philipp Wich
e94cf1c72b
iptables: install libext*.a into staging dir
...
SVN-Revision: 36867
2013-06-06 14:02:24 +00:00
Jo-Philipp Wich
ecc95dcba8
firewall: update to git head ( #13652 )
...
- simplifies using ipsets for rules and redirects, match direction can be specified in-place like option ipset 'setname src dst dst'
- uses zone_name_src_ACTION chains for input rules, this fixes logging with log enabled src zones
SVN-Revision: 36854
2013-06-05 11:40:40 +00:00
Jo-Philipp Wich
0a74d9d5c3
firewall3: fix accidentally changed install directive
...
SVN-Revision: 36840
2013-06-04 12:30:50 +00:00
Jo-Philipp Wich
07a3110e88
firewall: fix git source url
...
SVN-Revision: 36839
2013-06-04 12:23:47 +00:00
Jo-Philipp Wich
b721c92221
firewall3: rename to firewall, move into base system menu, update to git head with compatibility fixes for AA
...
SVN-Revision: 36838
2013-06-04 12:21:52 +00:00
Jo-Philipp Wich
0dd6753c09
Drop legacy firewall package
...
SVN-Revision: 36837
2013-06-04 12:21:44 +00:00
Jo-Philipp Wich
6f60308257
firewall3: update to git head ( #13641 )
...
* Fixes wrong chain used for zone forward policy
SVN-Revision: 36830
2013-06-04 10:26:49 +00:00
Jo-Philipp Wich
6eeca5176e
firewall3: update to git head
...
- Fixes problems with reusing matches or targets from loadable extensions
SVN-Revision: 36826
2013-06-03 16:38:29 +00:00
Felix Fietkau
8c69057980
uhttpd: update to latest version, fixes CGI related crashes
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36817
2013-06-01 21:43:06 +00:00
Steven Barth
089d6612ce
6relayd: Work around Windows DHCPv6 quirks Announcing deprecated addresses breaks Windows clients
...
SVN-Revision: 36815
2013-06-01 17:51:02 +00:00
Steven Barth
7ae506c7d4
odhcp6c: work around spurious false-positive address DECLINEs
...
SVN-Revision: 36809
2013-05-31 13:49:17 +00:00
Jo-Philipp Wich
3bb397c997
firewall3: use list notation for default zone network config to avoid "uci add_list" coercing the value wrongly
...
SVN-Revision: 36806
2013-05-31 13:23:23 +00:00
Steven Barth
bf582fbb7b
odhcp6c: fix handling of multiple RAs in a row
...
SVN-Revision: 36804
2013-05-31 10:02:39 +00:00
Steven Barth
cdc3caf533
6relayd: Better compatibility with misbheaving DHCPv6 clients * Make the "best" address / prefix the first one being announced * Only add the "best" address to the hosts-file
...
SVN-Revision: 36772
2013-05-30 15:42:30 +00:00
Steven Barth
519f27cd33
netifd: updated IPv6 prefix delegation * Added support for prefix classes * Various bugfixes
...
SVN-Revision: 36771
2013-05-30 15:42:25 +00:00
Felix Fietkau
02fe12c00d
uhttpd: update again to fix a ubus plugin crash bug
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36770
2013-05-30 13:16:38 +00:00
Felix Fietkau
eeb7fdc13e
uhttpd: update to latest version, fixes script timeout for ubus requests
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36767
2013-05-30 10:44:20 +00:00
Steven Barth
dc6625f977
6relayd: more verbosity in leases and logging
...
SVN-Revision: 36764
2013-05-30 07:56:55 +00:00
Steven Barth
56a3396bf2
iptables: bump to 1.4.19.1
...
SVN-Revision: 36760
2013-05-29 14:58:04 +00:00
Steven Barth
439fdd4d65
netifd: fix IPv6-addresses disappearing due to lifetime-overflows
...
SVN-Revision: 36748
2013-05-28 18:32:01 +00:00
Steven Barth
23b3cebd56
odhcp6c: fix or debug disappearing IPv6 addresses
...
SVN-Revision: 36745
2013-05-28 16:28:14 +00:00
Felix Fietkau
e6250644be
mac80211: add support for "active" monitor interfaces which allow userspace tools to connect to APs via injection
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36743
2013-05-28 11:10:41 +00:00
Steven Barth
61c0c6ab68
6relayd: RFC 6204 and naming improvements * Announce delegated prefixes using route info according to RFC 6204 L-3 * Enable hybrid stateless + stateful DHCPv6-mode as default
...
SVN-Revision: 36738
2013-05-27 20:38:13 +00:00
Jo-Philipp Wich
63603ee478
firewall3: update to git head
...
- allows building without IPv6 support
- uses more robust rules to cope with missing libext.a
- uses better linking strategy to avoid symbol clashes with older iptables
- introduces source compatiblity layer for different libxtables versions
SVN-Revision: 36736
2013-05-27 15:13:19 +00:00
Jo-Philipp Wich
e4f8c38ed1
firewall3: update to git head
...
- allows symbolic notation for src_ip, src_dip and dest_ip options, e.g. option src_ip 'lan' to automatically resolve to "192.168.1.0/24"
- automatically infer destination zone for redirects from target ip, this makes 'dest' optional and nat reflection setup more robust
- properly support output rules with dest '*' to hook directly into delegate_output
- fixes crash when processing rules with unresolved targets
SVN-Revision: 36721
2013-05-26 15:48:04 +00:00
Steven Barth
f63064a257
6relayd: Fix DHCPv6-server picking up addresses from master interface
...
SVN-Revision: 36718
2013-05-26 10:06:02 +00:00
Jo-Philipp Wich
90887b5fb3
firewall3: update to git head
...
- fixes linking issues with some toolchains
SVN-Revision: 36703
2013-05-24 12:49:06 +00:00
Steven Barth
d8d7d7f4aa
6relayd: fix a lease-timing issue with stateful DHCPv6
...
SVN-Revision: 36702
2013-05-24 12:31:30 +00:00
Jo-Philipp Wich
c1ff8cd9bb
firewall3: update to git head
...
- Use weak references for instantiating libext*.a matches, makes fw3 independant from the compile time features of iptables
- Do not leak memory when processing rules with unknown targets or matches
SVN-Revision: 36698
2013-05-23 13:07:44 +00:00
Felix Fietkau
75bb3138aa
uhttpd: update to latest version, fixes #13564 , #13560 , improves error handling as pointed out in #13537
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36696
2013-05-23 10:50:42 +00:00
Steven Barth
32c6ffb5a1
firewall3: Remove abandonend include
...
SVN-Revision: 36692
2013-05-23 06:38:25 +00:00
Jo-Philipp Wich
b757ca2259
firewall3: update to git head
...
- fix build on Linux < 3.7
- limit zone names to 14 bytes
SVN-Revision: 36691
2013-05-22 14:15:53 +00:00
Steven Barth
9c3ac668e0
6relayd: Let OpenWrt override default CFLAGS
...
SVN-Revision: 36690
2013-05-22 11:58:54 +00:00
Jo-Philipp Wich
c12189b379
firewall3: update to git head
...
- fixes reload when firewall is not running already
- fixes crash when ipsets are supported but undeclared
- fixes handling of per zone user chains on reload
SVN-Revision: 36689
2013-05-22 11:37:41 +00:00
Steven Barth
9d115df749
6relayd: Fix a segfault when multiple downstream interfaces are present
...
SVN-Revision: 36687
2013-05-21 18:05:37 +00:00
Jo-Philipp Wich
dd83e87ab0
firewall3: update to git head
...
- fixes segfault in flush command if ipset support is not available
- fixes internal rule generation if custom chains are enabled
SVN-Revision: 36686
2013-05-21 14:49:37 +00:00
Jo-Philipp Wich
6eec8009ba
ipset: remove dependency on iptables-mod-ipset - technically it does not depend on it and the iptables matches are now part of the base
...
SVN-Revision: 36685
2013-05-21 13:00:28 +00:00
Jo-Philipp Wich
9b6c31d4cc
firewall3: move libext*.a copying to compile phase
...
SVN-Revision: 36684
2013-05-21 12:58:36 +00:00
Jo-Philipp Wich
8df6cd005c
netfilter: move time, mark, set matches and MARK, REDIRECT, SET targets into base iptables package - drop iptables-mod-ipset
...
SVN-Revision: 36683
2013-05-21 12:58:15 +00:00
Jo-Philipp Wich
e8050c6c35
firewall3: update to git head
...
* use libiptc and libxtables directly to manage ruleset, iptables-restore is unreliable and prone to race conditions
* make ipset integration more reliable
SVN-Revision: 36681
2013-05-21 10:15:14 +00:00
Jo-Philipp Wich
a9a9644efd
iptables: use -ffunction-sections, -fdata-sections and --gc-sections
...
SVN-Revision: 36680
2013-05-21 10:15:10 +00:00
Steven Barth
24c39ddcf7
odhcp6c: Various fixes * Honour T1 and T2 values from servers better * Correctly send Reconfigure-Accept option in requests
...
SVN-Revision: 36678
2013-05-21 09:13:48 +00:00
Steven Barth
37baf2d6b2
6relayd: Various DHCPv6-fixes * Be more standards-compliant in stateful mode * Handle hostnames from Windows-clients correctly * Handle messages from DHCPv6-relays better
...
SVN-Revision: 36677
2013-05-21 09:13:40 +00:00
Steven Barth
c6f70381c9
odhcp6c: Fix address / prefix expiry logic
...
SVN-Revision: 36675
2013-05-20 14:54:20 +00:00
Steven Barth
dd161ae62b
dnsmasq: add directory for external hosts-files
...
SVN-Revision: 36655
2013-05-17 14:44:12 +00:00
Steven Barth
334c40da14
6relayd: Add stateful DHCPv6-support (IA_NA) * Add management_level option (0: set O-flag, >=1: set M-flag) * Add support for static DHCPv6-leases * Various fixes for DHCPv6-PD
...
SVN-Revision: 36654
2013-05-17 14:44:07 +00:00
Steven Barth
0f1be4425f
netifd: Unify interface-based routing for IPv4 and IPv6 * Add interface option to set routing table for protocol routes * Enabled for IPv6 for source-based filtering, disabled for IPv4
...
Based on a patch by Kristian Evensen. Thank You.
SVN-Revision: 36653
2013-05-17 14:44:02 +00:00
Felix Fietkau
7365e647f6
uhttpd: update to latest version, fixes index page processing order
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36644
2013-05-16 11:38:19 +00:00
Luka Perkov
4fc8e64a40
iproute2: workaround compile issues with gcc 4.8.x
...
SVN-Revision: 36642
2013-05-16 00:04:48 +00:00
Steven Barth
a62ca72309
odhcp6c: Fix handling of RAs when no DHCPv6-server is present
...
SVN-Revision: 36641
2013-05-15 11:07:01 +00:00
Luka Perkov
580481cd6d
iproute2: upgrade to 3.9.0
...
SVN-Revision: 36638
2013-05-14 23:49:34 +00:00
Luka Perkov
5be36cbe83
iproute2: print help in connmark
...
SVN-Revision: 36637
2013-05-14 23:49:31 +00:00
Felix Fietkau
d090eea125
uhttpd: update to latest version, fixes a SSL connection memory leak
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36636
2013-05-14 17:43:00 +00:00
Felix Fietkau
d481486aad
package: fold the IPv6 menu into Network
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36634
2013-05-14 15:02:31 +00:00
Steven Barth
e8f3897389
6relayd: Always announce the current MAC-address
...
* Fixes #13516 thanks to berni for the detailed bugreport.
SVN-Revision: 36629
2013-05-13 17:54:36 +00:00
Steven Barth
a1af842016
ds-lite: add ds-lite network protocol handler
...
SVN-Revision: 36628
2013-05-13 17:12:39 +00:00
Steven Barth
5ce135ed87
netifd: Various IPv6 improvements * Add support for IP-in-IPv6 tunnels (DS-Lite) * Use source-based routing for IPv6 to allow multi-wan * Various smaller tunnel setup improvements
...
SVN-Revision: 36627
2013-05-13 17:12:34 +00:00
Steven Barth
ea71678b09
netifd: added support for setting up 6rd from DHCP
...
SVN-Revision: 36626
2013-05-13 17:12:30 +00:00
Steven Barth
ad93a571c6
odhcp6c: added support for DS-Lite + various fixes
...
SVN-Revision: 36625
2013-05-13 17:12:25 +00:00
Steven Barth
973dad61b0
firewall3: Remove obsoleted ULA-border
...
SVN-Revision: 36624
2013-05-13 17:12:20 +00:00
Steven Barth
07d99b62b7
firewall3: add wan6 interface to wan-zone by default
...
SVN-Revision: 36623
2013-05-13 17:12:15 +00:00
Steven Barth
4cb9d9715c
firewall: Remove obsoleted ULA-border rule
...
SVN-Revision: 36622
2013-05-13 17:12:10 +00:00
Steven Barth
8560648082
6rd: increase metric of default route
...
This will prefer native IPv6 over 6rd if both are present.
SVN-Revision: 36605
2013-05-12 08:07:15 +00:00
Jo-Philipp Wich
d59f8cfa8e
iwinfo: only consider joined bss when finding current operating frequency, fixes spurious misreporting of frequencies in ad-hoc mode
...
SVN-Revision: 36604
2013-05-12 01:12:56 +00:00
Steven Barth
29d4c36622
add uci support for "proxy-dnssec" in dnsmasq
...
This patch simply adds support for the "--proxy-dnssec" command in dnsmasq into the init file so it can be used with /etc/config/dhcp.
Signed-off-by: Adam Gensler <openwrt@kristenandadam.net>
SVN-Revision: 36570
2013-05-07 07:19:51 +00:00
Felix Fietkau
9d8e3e03df
iw: update to 3.10, sync with nl80211.h changes in compat-wireless
...
Signed-off-by: Felix Fietkau <nbd@openwrt.org>
SVN-Revision: 36569
2013-05-06 22:35:50 +00:00
Steven Barth
9c1ed6447b
odhcp6c: Make SLAAC-only work without reqprefix=no
...
Previously if the upstream router did not provide any DHCPv6-service
the wan6 interface would not come up even if RAs were received. The new
behavior allows the wan6 interface to comeup with RA-only configuration
after a timeout of 10s.
SVN-Revision: 36555
2013-05-06 10:20:43 +00:00
Jo-Philipp Wich
95e139d0b2
ipset-dns: support simultaneously populating IPv4 and IPv6 sets
...
SVN-Revision: 36554
2013-05-06 10:01:45 +00:00
Jo-Philipp Wich
3c17fd41a4
Add ipset-dns - a tiny DNS proxy service which puts resolved ip addresses into a specified ipset
...
SVN-Revision: 36552
2013-05-06 08:44:54 +00:00